CVE-2026-60462

Analyzed Analyzed - Analysis Complete

Remote Code Execution in Oracle WebCenter Content

Publication date: 2026-07-21

Last updated on: 2026-07-31

Assigner: Oracle

Description

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-31

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-09

NVD

CVE-2026-60462

EUVD

EUVD-2026-46856

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	webcenter_content	12.2.1.4.0
oracle	webcenter_content	14.1.2.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle WebCenter Content, a product under Oracle Fusion Middleware. It affects versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker to remotely compromise the system via HTTP, potentially leading to a full takeover of Oracle WebCenter Content.

Detection Guidance

Detection of this vulnerability requires checking for vulnerable versions of Oracle WebCenter Content (12.2.1.4.0 or 14.1.2.0.0) and verifying if HTTP access is exposed without authentication. Inspect server logs for unusual activity and ensure the latest patches are applied.

Impact Analysis

An attacker could exploit this to gain control over Oracle WebCenter Content, leading to unauthorized access, data theft, or disruption of services. The high CVSS score indicates significant potential for confidentiality, integrity, and availability impacts.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations using affected versions must address this to maintain regulatory compliance.

Mitigation Strategies

Apply the latest security patches from Oracle for Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0. Restrict network access to HTTP ports used by the service. Monitor for unusual activity or unauthorized access attempts.

Hi! I’m here to help you understand CVE-2026-60462. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70